CVE-2025-9710: Unknown Responsive Lightbox & Gallery

Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days.

The Responsive Lightbox & Gallery WordPress plugin before 2.5.3 does not properly handle HTML tag attributes modifications, potentially allowing unauthenticated attackers to abuse the functionality to include event handlers and conduct Stored XSS attacks.

Affected products

• Unknown Responsive Lightbox & Gallery: before 2.5.3 (fixed in 2.5.3)

Published 2025-10-06. Last modified 2026-10-09.